ferents.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d3:59:1e:e1:98:34:96:9a:e7:4f:eb:82:a1:13:8d:30:c6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ferents.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:59:1e:e1:98:34:96:9a:e7:4f:eb:82:a1:13:8d:30:c6
Serial Number (int): 333254898851730486102850107342385142640838
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:0a:52:18:4e:64:f0:11:b3:b9:12:3f:a4:b9:1d:41:e9:24:1f:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e5:aa:3c:51:0d:eb:88:d5:78:65:ca:63:cc:5c:9c:4c:0b:cf:cd:d9
Fingerprint (sha256): 62:22:ce:64:3c:21:e7:c5:f2:09:f4:dc:3e:d9:05:2d:83:d0:1e:2a:4a:f5:34:d8:48:4a:94:95:f6:3c:0c:05

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ferents.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ferents.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.apfn.com
*.australiadriedfruit.com.au
*.blindagem.com
*.bocato.com
*.bunyard.com
*.caolanh.com
*.cizswaz18.xyz
*.contatossex.co
*.crikee.com
*.dadandgirl.net
*.desformes.com
*.didaftar.in
*.drcaldeira.com
*.ferents.com
*.fonceca.com
*.foottimes.com
*.goldensandsluxury.com
*.govazd.com
*.grandpashabet1211.com
*.grether.com
*.horche.com
*.ikenaga.com
*.insurenama.com
*.islamia.com
*.jamieleeboutique.com
*.kahrom.com
*.kennzahl.com
*.lacasadelmariachi.com
*.laputa.net
*.lemleys.com
*.lesmana.com
*.lewthwaite.com
*.licen.com
*.marathonmaniac.com
*.mix33.com
*.mossing.com
*.mypre.com
*.myqualitymart.com
*.nestchildrensboutique.com
*.pesut.com
*.piedrascolon.com
*.scannella.com
*.superiorequipmentsupplies.com
*.theannuity.com
*.theoutput.com
*.trittau.com
*.varadi.com
*.vicente.net
*.visiongospel.com
*.whaletank.com
apfn.com
australiadriedfruit.com.au
blindagem.com
bocato.com
bunyard.com
caolanh.com
cizswaz18.xyz
contatossex.co
crikee.com
dadandgirl.net
desformes.com
didaftar.in
drcaldeira.com
ferents.com
fonceca.com
foottimes.com
goldensandsluxury.com
govazd.com
grandpashabet1211.com
grether.com
horche.com
ikenaga.com
insurenama.com
islamia.com
jamieleeboutique.com
kahrom.com
kennzahl.com
lacasadelmariachi.com
laputa.net
lemleys.com
lesmana.com
lewthwaite.com
licen.com
marathonmaniac.com
mix33.com
mossing.com
mypre.com
myqualitymart.com
nestchildrensboutique.com
pesut.com
piedrascolon.com
scannella.com
superiorequipmentsupplies.com
theannuity.com
theoutput.com
trittau.com
varadi.com
vicente.net
visiongospel.com
whaletank.com

Other certificates including the domain name ferents.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ferents.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333254898851730486102850107342385142640838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 08:40:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 08:40:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ferents.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 889847672278866712591124913462814087102810245431209930336543090995406354046270250071803216686154789059371055442673302052935021369443663409837689299381932837407776356160676234013954492358438163740079593501350390342410189424292334967060876654546811727704955775177786730760737268842665226632037327677438411727375131773085253360502244439537714761511890240588902946552260490440425447362734784984494244996795575227153516134273756523495828785292442609451236749270858932521952183304767777152895996806271152253429170304039327196132443160984674505909403496927259042364721088666989735019129931738504194615070884821421817936483244567770786135761688742545925896341509408840259261637685685073459212867095205389470546367314191675221962458986776088876374127529507640177776383669650247576179165910412425507684266034833442603575007858860222424091174460323869271913557168921084479910841134442154661043655726569371566433096276606463723278385069239410654100326278226637031105761998990603362949734911542658578942802640451157713512725229201580085753465792810298845207380163904160845934061703458007746253555155091081725824309729044112759121947625180389168038803040184956066272181869038746858889627829049358503353823596600243803058750198319163150340798487407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							970a52184e64f011b3b9123fa4b91d41e9241fe5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1652 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apfn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.australiadriedfruit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blindagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bocato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bunyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caolanh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cizswaz18.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contatossex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crikee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dadandgirl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desformes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.didaftar.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drcaldeira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ferents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fonceca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foottimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldensandsluxury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.govazd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grandpashabet1211.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grether.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikenaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insurenama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.islamia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jamieleeboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kennzahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacasadelmariachi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laputa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemleys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesmana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lewthwaite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.licen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marathonmaniac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mix33.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mossing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myqualitymart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestchildrensboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pesut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piedrascolon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scannella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superiorequipmentsupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theannuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theoutput.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trittau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.varadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vicente.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visiongospel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whaletank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apfn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australiadriedfruit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blindagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bocato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bunyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caolanh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cizswaz18.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contatossex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crikee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dadandgirl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desformes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'didaftar.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drcaldeira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonceca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foottimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldensandsluxury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govazd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandpashabet1211.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grether.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikenaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurenama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islamia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamieleeboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennzahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacasadelmariachi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laputa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemleys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesmana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lewthwaite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marathonmaniac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mix33.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mossing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myqualitymart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestchildrensboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pesut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piedrascolon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scannella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiorequipmentsupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theannuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoutput.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trittau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vicente.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visiongospel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whaletank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d02322d380000040300463044022035b5ce2108ea9616b2f550e95261bc35d7d5a29a2b8618050632dfb9115611f20220493b1741da74594a9c6814bcd4d025a3fa1cefd4178640cc83d716c0a21932df0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d02322dfa0000040300473045022023ad7ed12588ea85fda9b76ffa0ba4e9a64b312e8e13d7a00d32c131e60d97f0022100d799875faf9a87be329f61efaa8d78b16922bf02a8ea874f39923681c7168b3e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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